CLAIMS 

What is claimed is: 

1. A system for securely transporting data to 
multiple domains comprising: 
5 a common channel for carrying data of a plurality of 

domains wherein said plurality of domains includes at 
least a first domain and a second domain; 

at least one switch through which data enters said 
common channel; 
10 at least one switch through which data exits said 

common channe 1 ; 

a first plurality of routers coupled to said at 
least one switch through which data enters said common 
channel; 

15 a second plurality of routers coupled to said at 

least one switch through which data exits said common 
channel; 

a first filtering means for filtering data traveling 
through said at least one switch through which data 
20 enters said common channel and said at least one switch 
through which data exits said common channel based on a 
first filtering criteria; 

a second filtering means for filtering data 
traveling through said plurality of routers coupled to 
25 said at least one switch through which data enters said 
common channel based on a second filtering criteria; 

a third filtering means for filtering data traveling 
through said plurality of routers coupled to said at 
least one switch through which data exits said common 
30 channel based on a third filtering criteria; 

wherein said first filtering means, said second 
filtering means, and said third filtering means prevent 
data designated for said first domain from transferring 
to said second domain and to prevent data designated for 



said second domain from transferring to said first 
domain. 

2. The system of claim 1 further comprising 
5 terminals coupled. to each of said routers. 

3. The system of claim 2 wherein said terminals are 
coupled to said routers by way of Ethernet switches and 
network interface cards. 
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4. The system of claim 3 wherein said routers and 
the Ethernet switch coupled thereto are housed in a 
single chassis. 

15 5. The system of claim 4 wherein said router and the 

Ethernet switch coupled thereto independently process 
data . 

6. The system of claim 1 further comprising video 
20 equipment coupled to at least one of said switches. 

7. The system of claim 1 further comprising audio 
equipment coupled to at least one of said switches. 

25 8. The system of claim 1 wherein said at least one 

switch through which data enters said common channel is 
in a ring configuration. 

9. The system of claim 1 wherein said at least one 

30 switch through which data exits said common channel is in 
a ring configuration. 

10. The system of claim 1 wherein said first 
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filtering criteria is any of the group consisting of IP 
addresses and socket numbers. 

11. The system of claim 1 wherein said second 

5 filtering criteria is any of the group consisting of MAC 
addresses , AAL types, and ATM header error controls. 

12. The system of claim 1 wherein said third 
filtering criteria is any of the group consisting of MAC 

10 addresses, IP addresses, IP header checksums, and socket 
numbers . 



13. The system of claim 1 wherein said system does 
not employ encryption technology. 

15 

14. A system for securely transporting data to 
multiple domains comprising: 

a common channel for carrying data of a plurality of 
domains wherein said plurality of domains includes at 
20 least a first domain and a second domain; 

at least one switch through which data enters said 
common channel; 

at least one switch through which data exits said 
common channel; 
25 a first plurality of routers coupled to said at 

least one switch through which data enters said common 
channel ; 

a second plurality of routers coupled to said at 
least one switch through which data exits said common 
30 channel; 

a switch coupled to one of said first plurality of 
routers; 

a switch coupled to one of said second plurality of 
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routers; 

a first filtering means for filtering data traveling 
through said at least one switch through which data 
enters said common channel and said at least one switch 
5 through which data exits said common channel based on a 
first filtering criteria; 

a second filtering means for filtering data 
traveling through said plurality of routers coupled to 
said at least one switch through which data enters said 
10 common channel based on a second filtering criteria; 

a third filtering means for filtering data traveling 
through said plurality of routers coupled to said at 
least one switch through which data exits said common 
channel based on a third filtering criteria; 
15 a fourth filtering means for filtering data 

traveling through said switch coupled to one of said 
first plurality of routers based on a fourth filtering 
criteria; 

a fifth filtering means for filtering data traveling 
20 through said switch coupled to one of said second 

plurality of routers based on a fifth filtering criteria; 

wherein said first filtering means, said second 
filtering means, said third filtering means, said fourth 
filtering means, and fifth filtering means prevent data 
25 designated for said first domain from transferring to 
said second domain and to prevent data designated for 
said second domain from transferring to said first 
domain. 

30 15. The system of claim 14 wherein said switch 

coupled to one of said first plurality of routers is an 
Ethernet switch. 
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16. The system of claim 14 wherein said switch 
coupled to one of said second plurality of routers is an 
Ethernet switch. 

17. The system of claim 14 wherein at least one 
terminal is coupled to said switch coupled to one of said 
first plurality of routers. 

18. The system of claim 14 wherein at least one 
terminal is coupled to said switch coupled to one of said 
second plurality of routers. 

19. The system of claim 14 wherein said first 
filtering criteria is any of the group consisting of IP 
addresses and socket numbers. 

20. The system of claim 14 wherein said second 
filtering criteria is any of the group consisting of MAC 
addresses, AAL types, and ATM header error controls. 

21. The system of claim 14 wherein said third 
filtering criteria is any of the group consisting of MAC 
addresses, IP addresses, IP header checksums, and socket 
numbers . 

22. The system of claim 14 wherein said fourth 
filtering criteria is MAC addresses. 

23. The system of claim 14 wherein said fifth 
filtering criteria is MAC addresses. 

24. The system of claim 14 wherein said system does 
not employ encryption technology. 
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25. A system for transporting data comprising: 
a first domain comprising a first plurality of 

filters in a first communications channel, the first 
communications channel including a common portion, a 
first terminal coupled at one end of the first 
communications channel, and a second terminal coupled at 
another end of the first communications channel, the 
first plurality of filters employing a first plurality of 
filtering criteria; 

a second domain comprising a second plurality of 
filters in a second communications channel, the second 
communications channel including the common portion, a 
third terminal coupled at one end of the second 
communications channel, and a fourth terminal coupled at 
another end of the second communications channel, the 
second plurality of filters employing a second plurality 
of filtering criteria. 

26. The system of Claim 25 wherein at least one 
filter in said first plurality of filters is in said 
second plurality of filters also. 

27. The system of Claim 26 wherein said first 
plurality of filters includes a filter based in an IP 
address . 

28. The system of Claim 26 wherein said first 
plurality of filters includes a filter based on a MAC 
address . 

29. The system of Claim 26 wherein said first 
plurality of filters includes a router. 
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30. The system of Claim 29 wherein 
plurality of filters includes a router. 



said second 



31. The system of Claim 26 wherein said first 
5 plurality of filters includes a switch. 

32. The system of Claim 31 wherein said switch is 
an ATM switch, and where said ATM switch is said at least 
on filter. 
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33. A system for transporting data comprising: 

a first domain comprising a first plurality of filters in 
a first communications channel, the first communications 
channel including a common portion, the first plurality 
15 of filters employing a first plurality of filtering 
criteria; 

a second domain comprising a second plurality 
of filters in a second communications channel, the second 
communications channel including the common portion, the 
20 second plurality of filters employing a second plurality 
of filtering criteria; 

a plurality of managers each coupled to one of 
the first plurality of filters and the second plurality 
of filters, each of the plurality managers comprising 
25 means for configuring the one of the first plurality of 
filters and the second plurality of filters; 

at least one control terminal coupled to the 
plurality of managers for controlling said plurality of 
managers . 
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34. The system in Claim 33 wherein said at least 
one control channel includes means for storing a 
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configuration file for each of said first plurality of 
filters and each of said second plurality of filters. 

35. The system of Claim 33 wherein each of said 
plurality of managers includes respective management 
software . 

36. The system of Claim 35 wherein said control 
terminal is does not include management software, but 
rather includes communications software in communication 
with said management software. 

37. The system of Claim 36 wherein said control 
terminal includes x-protocol software. 
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